fc26da20c7ca8f009e2abb632bdbe0a73439e5b2c6fc97fd4fb2c9d34527c63c

Submit
Reports

Overview

overview

Static

static

Mr.Time to...ol.exe

windows7-x64

Mr.Time to...ol.exe

windows10-2004-x64

Mr.Time to...40.dll

windows7-x64

Mr.Time to...40.dll

windows10-2004-x64

Mr.Time to..._1.dll

windows7-x64

Mr.Time to..._1.dll

windows10-2004-x64

Mr.Time to...z2.dll

windows7-x64

Mr.Time to...z2.dll

windows10-2004-x64

Mr.Time to...al.dll

windows7-x64

Mr.Time to...al.dll

windows10-2004-x64

Mr.Time to...ib.dll

windows7-x64

Mr.Time to...ib.dll

windows10-2004-x64

Mr.Time to...ma.dll

windows7-x64

Mr.Time to...ma.dll

windows10-2004-x64

Mr.Time to...ue.dll

windows7-x64

Mr.Time to...ue.dll

windows10-2004-x64

Mr.Time to...sl.dll

windows7-x64

Mr.Time to...sl.dll

windows10-2004-x64

Mr.Time to...mi.dll

windows7-x64

Mr.Time to...mi.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 05:51

Sharing

Copy URL

Twitter E-mail

Static task

static1

pyinstaller

2 signatures

Behavioral task

behavioral1

Sample

Mr.Time tool/Mr.Time tool.exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Mr.Time tool/Mr.Time tool.exe

Resource

win10v2004-20240508-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

Mr.Time tool/_internal/VCRUNTIME140.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Mr.Time tool/_internal/VCRUNTIME140.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Mr.Time tool/_internal/VCRUNTIME140_1.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Mr.Time tool/_internal/VCRUNTIME140_1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Mr.Time tool/_internal/_bz2.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Mr.Time tool/_internal/_bz2.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Mr.Time tool/_internal/_decimal.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Mr.Time tool/_internal/_decimal.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Mr.Time tool/_internal/_hashlib.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Mr.Time tool/_internal/_hashlib.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Mr.Time tool/_internal/_lzma.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Mr.Time tool/_internal/_lzma.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Mr.Time tool/_internal/_queue.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Mr.Time tool/_internal/_queue.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Mr.Time tool/_internal/_ssl.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Mr.Time tool/_internal/_ssl.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Mr.Time tool/_internal/_wmi.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Mr.Time tool/_internal/_wmi.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Mr.Time tool/_internal/api-ms-win-core-console-l1-1-0.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Mr.Time tool/_internal/api-ms-win-core-datetime-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Mr.Time tool/_internal/api-ms-win-core-debug-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Mr.Time tool/_internal/api-ms-win-core-errorhandling-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Mr.Time tool/_internal/api-ms-win-core-fibers-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Mr.Time tool/_internal/api-ms-win-core-file-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Mr.Time tool/_internal/api-ms-win-core-file-l1-2-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Mr.Time tool/_internal/api-ms-win-core-file-l2-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Mr.Time tool/_internal/api-ms-win-core-handle-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Mr.Time tool/_internal/api-ms-win-core-heap-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Mr.Time tool/_internal/api-ms-win-core-interlocked-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Mr.Time tool/_internal/api-ms-win-core-libraryloader-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Mr.Time tool/_internal/VCRUNTIME140.dll
Size

116KB
MD5

be8dbe2dc77ebe7f88f910c61aec691a
SHA1

a19f08bb2b1c1de5bb61daf9f2304531321e0e40
SHA256

4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
SHA512

0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
SSDEEP

1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1884 wrote to memory of 2384	1884	rundll32.exe	WerFault.exe
PID 1884 wrote to memory of 2384	1884	rundll32.exe	WerFault.exe
PID 1884 wrote to memory of 2384	1884	rundll32.exe	WerFault.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Mr.Time tool\_internal\VCRUNTIME140.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1884

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1884 -s 80
2⤵
PID:2384

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads